tbarnouin/nixos-hypervisor
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Working postgresql crowdsec config + remove fail2ban
Some checks are pending
/ Build Nix targets (push) Waiting to run
Details

Browse source
This commit is contained in:
Théo Barnouin 2025-04-14 15:28:01 +02:00
parent fd8349cf91
commit d6eb45c45a
4 changed files with 42 additions and 40 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

11
services/grafana/default.nix
View file

@ -189,7 +189,7 @@ in {
job_name = "jellyfin"; job_name = "jellyfin";
static_configs = [ static_configs = [
{ {
targets = ["192.168.1.42:9100"]; targets = ["192.168.1.42:9002"];
} }
]; ];
} }
@ -256,6 +256,15 @@ in {
} }
]; ];
} }
{
job_name = "crowdsec_postgresql";
metrics_path = "/metrics";
static_configs = [
{
targets = ["192.168.1.13:6060"];
}
];
}
]; ];
}; };
loki = { loki = {

7
services/postgresql/default.nix
View file

@ -45,9 +45,8 @@ in {
localConfig = { localConfig = {
acquisitions = [ acquisitions = [
{ {
filenames = [ source = "journalctl";
"/var/log/postgresql/*.log" journalctl_filter = [ "_SYSTEMD_UNIT=postgresql.service" ];
];
labels = { labels = {
type = "syslog"; type = "syslog";
}; };
@ -89,6 +88,7 @@ in {
GRANT ALL PRIVILEGES ON DATABASE onlyoffice TO onlyoffice; GRANT ALL PRIVILEGES ON DATABASE onlyoffice TO onlyoffice;
''; '';
}; };
};
# Stolen from https://discourse.nixos.org/t/assign-password-to-postgres-user-declaratively/9726/3 # Stolen from https://discourse.nixos.org/t/assign-password-to-postgres-user-declaratively/9726/3
# This is an awful situation # This is an awful situation
systemd.services.postgresql.postStart = let systemd.services.postgresql.postStart = let
@ -119,7 +119,6 @@ in {
END $$; END $$;
EOF EOF
''; '';
};
networking.firewall.allowedTCPPorts = [5432]; networking.firewall.allowedTCPPorts = [5432];
}; };
} }

3
systems/minimalLXCConfig.nix
View file

@ -112,9 +112,6 @@
} }
]; ];
}; };
fail2ban = {
enable = true;
};
crowdsec = { crowdsec = {
enable = true; enable = true;
package = pkgs.crowdsec; package = pkgs.crowdsec;

3
systems/minimalVMConfig.nix
View file

@ -99,9 +99,6 @@
} }
]; ];
}; };
fail2ban = {
enable = true;
};
crowdsec = { crowdsec = {
enable = true; enable = true;
package = pkgs.crowdsec; package = pkgs.crowdsec;